Mandatory Profiles on a Local Machine

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

We have a set of Tablet PCs that are going to be deployed to a remote site
(No possible connection to our domain). The PCs are going to be used by
multiple factory workers and we have to have them use a generic account to
log into the PCs, but we do not want them to be able to change anything, and
if they do, it discards the changes on logoff\restart.

I have tried setting up the profile & renaming ntuser.dat to ntuser.man, but
it ends up keeping any changes that are made to the system. I have also tried
to specify a path to the profile (C:\Documents and Settings\MandProfile\)
under Comp Mgmt->Local Users & Groups, but then Windows says that it cannot
locate the profile.

Need Help ASAP!!

Justin Hippen

Advanced Technology Services, Inc.

MCP
 
In Justin Hippen - ATS, Inc. <Justin Hippen - ATS,
(e-mail address removed)> typed:
We have a set of Tablet PCs that are going to be deployed to a remote
site (No possible connection to our domain). The PCs are going to be
used by multiple factory workers and we have to have them use a
generic account to log into the PCs, but we do not want them to be
able to change anything
Click to expand...

This account is in the Users group, only, right?
, and if they do, it discards the changes on
logoff\restart.

I have tried setting up the profile & renaming ntuser.dat to
ntuser.man, but it ends up keeping any changes that are made to the
system.
Click to expand...

Such as.... ?
I have also tried to specify a path to the profile
(C:\Documents and Settings\MandProfile\) under Comp Mgmt->Local Users
& Groups, but then Windows says that it cannot locate the profile.
Click to expand...

That won't work, no.
Need Help ASAP!!

Justin Hippen

Advanced Technology Services, Inc.

MCP
Click to expand...

What about the Shared Computer Toolkit (from MS) or Doug Knox's security
console (www.dougknox.com) ?
 
You can change the NTFS permisisons on the user account that is used to
restrict what the users can do. Normally a user has full control access to
every folder in the user profile but as an administrator you can change that
to be read/list/execute or as needed on the folders in the profile being
used such as start menu, desktop, etc.

Steve


"Justin Hippen - ATS, Inc." <Justin Hippen - ATS,
(e-mail address removed)> wrote in message
news:[email protected]...
 
Back
Top